{"id":"https://openalex.org/W4415159187","doi":"https://doi.org/10.1109/tifs.2025.3616594","title":"Enabling Gradient Inversion Attack Against SplitFed Learning via <i>L</i> <sub>2</sub> Norm Amplification","display_name":"Enabling Gradient Inversion Attack Against SplitFed Learning via <i>L</i> <sub>2</sub> Norm Amplification","publication_year":2025,"publication_date":"2025-01-01","ids":{"openalex":"https://openalex.org/W4415159187","doi":"https://doi.org/10.1109/tifs.2025.3616594"},"language":"en","primary_location":{"id":"doi:10.1109/tifs.2025.3616594","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tifs.2025.3616594","pdf_url":null,"source":{"id":"https://openalex.org/S61310614","display_name":"IEEE Transactions on Information Forensics and Security","issn_l":"1556-6013","issn":["1556-6013","1556-6021"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Information Forensics and Security","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5046132687","display_name":"Jianan Zhao","orcid":"https://orcid.org/0000-0002-1859-3436"},"institutions":[{"id":"https://openalex.org/I16609230","display_name":"Hunan University","ror":"https://ror.org/05htk5m33","country_code":"CN","type":"education","lineage":["https://openalex.org/I16609230"]},{"id":"https://openalex.org/I4210154423","display_name":"Education Department of Hunan Province","ror":"https://ror.org/05ckg3w11","country_code":"CN","type":"government","lineage":["https://openalex.org/I4210154423"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Jianan Zhao","raw_affiliation_strings":["College of Cyber Science and Technology, Hunan University, Changsha, Hunan, China","School of Computer Science and Electronic Engineering, Hunan University, Changsha, Hunan Province, China"],"raw_orcid":"https://orcid.org/0000-0002-1859-3436","affiliations":[{"raw_affiliation_string":"College of Cyber Science and Technology, Hunan University, Changsha, Hunan, China","institution_ids":["https://openalex.org/I16609230"]},{"raw_affiliation_string":"School of Computer Science and Electronic Engineering, Hunan University, Changsha, Hunan Province, China","institution_ids":["https://openalex.org/I16609230","https://openalex.org/I4210154423"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5072498852","display_name":"Wenjuan Tang","orcid":"https://orcid.org/0000-0002-9607-8974"},"institutions":[{"id":"https://openalex.org/I16609230","display_name":"Hunan University","ror":"https://ror.org/05htk5m33","country_code":"CN","type":"education","lineage":["https://openalex.org/I16609230"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Wenjuan Tang","raw_affiliation_strings":["College of Cyber Science and Technology, Hunan University, Changsha, Hunan, China","Greater Bay Area Institute for Innovation, School of Computer Science and Electronic Engineering, Hunan University, Changsha, Hunan Province, China"],"raw_orcid":"https://orcid.org/0000-0002-9607-8974","affiliations":[{"raw_affiliation_string":"College of Cyber Science and Technology, Hunan University, Changsha, Hunan, China","institution_ids":["https://openalex.org/I16609230"]},{"raw_affiliation_string":"Greater Bay Area Institute for Innovation, School of Computer Science and Electronic Engineering, Hunan University, Changsha, Hunan Province, China","institution_ids":["https://openalex.org/I16609230"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100736887","display_name":"Kuan Zhang","orcid":"https://orcid.org/0000-0002-4262-153X"},"institutions":[{"id":"https://openalex.org/I114395901","display_name":"University of Nebraska\u2013Lincoln","ror":"https://ror.org/043mer456","country_code":"US","type":"education","lineage":["https://openalex.org/I114395901"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Kuan Zhang","raw_affiliation_strings":["Department of Electrical and Computer Engineering, University of Nebraska&#x2013;Lincoln, Lincoln, NE, USA","Department of Electrical and Computer Engineering, University of Nebraska-Lincoln, Lincoln, NE, USA"],"raw_orcid":"https://orcid.org/0000-0002-4262-153X","affiliations":[{"raw_affiliation_string":"Department of Electrical and Computer Engineering, University of Nebraska&#x2013;Lincoln, Lincoln, NE, USA","institution_ids":["https://openalex.org/I114395901"]},{"raw_affiliation_string":"Department of Electrical and Computer Engineering, University of Nebraska-Lincoln, Lincoln, NE, USA","institution_ids":["https://openalex.org/I114395901"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5061448582","display_name":"Hongbo Jiang","orcid":"https://orcid.org/0000-0001-7372-2539"},"institutions":[{"id":"https://openalex.org/I16609230","display_name":"Hunan University","ror":"https://ror.org/05htk5m33","country_code":"CN","type":"education","lineage":["https://openalex.org/I16609230"]},{"id":"https://openalex.org/I4210154423","display_name":"Education Department of Hunan Province","ror":"https://ror.org/05ckg3w11","country_code":"CN","type":"government","lineage":["https://openalex.org/I4210154423"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Hongbo Jiang","raw_affiliation_strings":["School of Computer Science and Electronic Engineering, Hunan University, Changsha, China","School of Computer Science and Electronic Engineering, Hunan University, Changsha, Hunan Province, China"],"raw_orcid":"https://orcid.org/0000-0001-7372-2539","affiliations":[{"raw_affiliation_string":"School of Computer Science and Electronic Engineering, Hunan University, Changsha, China","institution_ids":["https://openalex.org/I16609230"]},{"raw_affiliation_string":"School of Computer Science and Electronic Engineering, Hunan University, Changsha, Hunan Province, China","institution_ids":["https://openalex.org/I16609230","https://openalex.org/I4210154423"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":4,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.13476734,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":"20","issue":null,"first_page":"11668","last_page":"11683"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9965000152587891,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9965000152587891,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11609","display_name":"Geophysical Methods and Applications","score":0.9860000014305115,"subfield":{"id":"https://openalex.org/subfields/2212","display_name":"Ocean Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12702","display_name":"Brain Tumor Detection and Classification","score":0.9043999910354614,"subfield":{"id":"https://openalex.org/subfields/2808","display_name":"Neurology"},"field":{"id":"https://openalex.org/fields/28","display_name":"Neuroscience"},"domain":{"id":"https://openalex.org/domains/1","display_name":"Life Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/inversion","display_name":"Inversion (geology)","score":0.6654999852180481},{"id":"https://openalex.org/keywords/gradient-descent","display_name":"Gradient descent","score":0.5099999904632568},{"id":"https://openalex.org/keywords/norm","display_name":"Norm (philosophy)","score":0.4788999855518341},{"id":"https://openalex.org/keywords/prior-information","display_name":"Prior information","score":0.3107999861240387},{"id":"https://openalex.org/keywords/information-privacy","display_name":"Information privacy","score":0.3050999939441681},{"id":"https://openalex.org/keywords/synthetic-data","display_name":"Synthetic data","score":0.2924000024795532}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7501000165939331},{"id":"https://openalex.org/C1893757","wikidata":"https://www.wikidata.org/wiki/Q3653001","display_name":"Inversion (geology)","level":3,"score":0.6654999852180481},{"id":"https://openalex.org/C153258448","wikidata":"https://www.wikidata.org/wiki/Q1199743","display_name":"Gradient descent","level":3,"score":0.5099999904632568},{"id":"https://openalex.org/C191795146","wikidata":"https://www.wikidata.org/wiki/Q3878446","display_name":"Norm (philosophy)","level":2,"score":0.4788999855518341},{"id":"https://openalex.org/C11413529","wikidata":"https://www.wikidata.org/wiki/Q8366","display_name":"Algorithm","level":1,"score":0.40230000019073486},{"id":"https://openalex.org/C3020402766","wikidata":"https://www.wikidata.org/wiki/Q104376712","display_name":"Prior information","level":2,"score":0.3107999861240387},{"id":"https://openalex.org/C123201435","wikidata":"https://www.wikidata.org/wiki/Q456632","display_name":"Information privacy","level":2,"score":0.3050999939441681},{"id":"https://openalex.org/C160920958","wikidata":"https://www.wikidata.org/wiki/Q7662746","display_name":"Synthetic data","level":2,"score":0.2924000024795532},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.29010000824928284},{"id":"https://openalex.org/C2778755073","wikidata":"https://www.wikidata.org/wiki/Q10858537","display_name":"Scale (ratio)","level":2,"score":0.28110000491142273},{"id":"https://openalex.org/C51632099","wikidata":"https://www.wikidata.org/wiki/Q3985153","display_name":"Training set","level":2,"score":0.2797999978065491},{"id":"https://openalex.org/C67186912","wikidata":"https://www.wikidata.org/wiki/Q367664","display_name":"Data modeling","level":2,"score":0.26759999990463257},{"id":"https://openalex.org/C80444323","wikidata":"https://www.wikidata.org/wiki/Q2878974","display_name":"Theoretical computer science","level":1,"score":0.2660999894142151},{"id":"https://openalex.org/C117220453","wikidata":"https://www.wikidata.org/wiki/Q5172842","display_name":"Correlation","level":2,"score":0.2644999921321869},{"id":"https://openalex.org/C115680565","wikidata":"https://www.wikidata.org/wiki/Q5977448","display_name":"Gradient method","level":2,"score":0.26170000433921814},{"id":"https://openalex.org/C2779582901","wikidata":"https://www.wikidata.org/wiki/Q21013010","display_name":"Distributed learning","level":2,"score":0.25999999046325684}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/tifs.2025.3616594","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tifs.2025.3616594","pdf_url":null,"source":{"id":"https://openalex.org/S61310614","display_name":"IEEE Transactions on Information Forensics and Security","issn_l":"1556-6013","issn":["1556-6013","1556-6021"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Information Forensics and Security","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G4346401620","display_name":null,"funder_award_id":"2025A1515010117","funder_id":"https://openalex.org/F4320337111","funder_display_name":"Basic and Applied Basic Research Foundation of Guangdong Province"},{"id":"https://openalex.org/G5381956252","display_name":null,"funder_award_id":"62202157","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G5648288658","display_name":null,"funder_award_id":"2025A1515010117","funder_id":"https://openalex.org/F4320320671","funder_display_name":"National Research Foundation"}],"funders":[{"id":"https://openalex.org/F4320320671","display_name":"National Research Foundation","ror":"https://ror.org/05s0g1g46"},{"id":"https://openalex.org/F4320321001","display_name":"National Natural Science Foundation of China","ror":"https://ror.org/01h0zpd94"},{"id":"https://openalex.org/F4320337111","display_name":"Basic and Applied Basic Research Foundation of Guangdong Province","ror":null}],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":23,"referenced_works":["https://openalex.org/W2103559027","https://openalex.org/W2108598243","https://openalex.org/W2194775991","https://openalex.org/W2473418344","https://openalex.org/W2767079719","https://openalex.org/W2963209930","https://openalex.org/W3018102029","https://openalex.org/W3035574324","https://openalex.org/W3172312230","https://openalex.org/W3175192640","https://openalex.org/W3203780767","https://openalex.org/W3212079419","https://openalex.org/W4312323164","https://openalex.org/W4312809802","https://openalex.org/W4312815981","https://openalex.org/W4319778953","https://openalex.org/W4382203360","https://openalex.org/W4386245189","https://openalex.org/W4387448210","https://openalex.org/W4388145809","https://openalex.org/W4388579751","https://openalex.org/W4396941604","https://openalex.org/W4399485152"],"related_works":[],"abstract_inverted_index":{"SplitFed":[0],"Learning":[1],"(SFL)":[2],"represents":[3],"a":[4,88,131],"compelling":[5],"distributed":[6],"learning":[7],"paradigm":[8],"tailored":[9],"for":[10,70,169],"resource-constrained":[11],"edge":[12],"computing":[13],"scenarios,":[14],"wherein":[15],"the":[16,33,39,51,80,109,135,154,161,170,178],"privacy":[17],"threat":[18],"posed":[19],"by":[20,106],"Gradient":[21],"Inversion":[22,98],"Attacks":[23],"(GIA)":[24],"remains":[25],"challenging.":[26],"The":[27],"unique":[28],"architecture":[29],"of":[30,56,114,120],"SFL":[31,81,92,191],"restricts":[32],"fed":[34],"server\u2019s":[35],"access":[36,172],"only":[37],"to":[38,152,173,185],"client-side":[40],"model\u2019s":[41],"<italic":[42,94],"xmlns:mml=\"http://www.w3.org/1998/Math/MathML\"":[43,95,111,138],"xmlns:xlink=\"http://www.w3.org/1999/xlink\">deficient":[44],"gradients</i>,":[45],"which":[46,64,101],"lack":[47],"essential":[48],"information":[49,59,69,162],"about":[50],"original":[52,103],"data.":[53],"This":[54,167],"absence":[55],"complete":[57,67,174],"gradient":[58,68,127,136,156],"hinders":[60],"traditional":[61],"GIA":[62,122,196],"methods,":[63],"rely":[65],"on":[66,145],"effective":[71],"data":[72,105],"reconstruction,":[73],"thereby":[74],"significantly":[75],"diminishing":[76],"their":[77],"effectiveness":[78],"in":[79,164],"context.":[82],"In":[83],"this":[84,146],"paper,":[85],"we":[86,129,148],"propose":[87],"novel":[89],"attack":[90,142,179,200],"against":[91],"called":[93],"xmlns:xlink=\"http://www.w3.org/1999/xlink\">Deficient":[96],"Gradient-based":[97],"Attack</i>":[99],"(DGIA),":[100],"reconstructs":[102],"training":[104],"artificially":[107],"amplifying":[108],"\u2113<sub":[110,137],"xmlns:xlink=\"http://www.w3.org/1999/xlink\">2</sub>":[112,139],"norm":[113,140],"deficient":[115,165],"gradients.":[116,166],"Through":[117],"extensive":[118,183],"evaluation":[119],"how":[121],"performance":[123,188],"varies":[124],"with":[125,194],"different":[126],"magnitudes,":[128],"observe":[130],"definitive":[132],"correlation":[133],"between":[134],"and":[141,176,198],"performance.":[143,180],"Based":[144],"correlation,":[147],"further":[149],"optimize":[150],"DGIA":[151],"identify":[153],"optimal":[155],"amplification":[157],"scale":[158],"that":[159],"maximizes":[160],"encoded":[163],"compensates":[168],"restricted":[171],"gradients":[175],"enhances":[177],"We":[181],"conduct":[182],"experiments":[184],"demonstrate":[186],"DGIA\u2019s":[187],"across":[189],"various":[190],"scenarios":[192],"compared":[193],"other":[195],"schemes":[197],"show":[199],"efficacy":[201],"under":[202],"general":[203],"defenses.":[204]},"counts_by_year":[],"updated_date":"2026-06-11T09:08:48.828518","created_date":"2025-10-14T00:00:00"}